Memory Management Vulnerability in Linux Kernel Affects Security of Crypto Data

CVE-2025-38575

Summary

A vulnerability has been identified in the Linux kernel's handling of memory allocation related to the ksmbd service. The flaw stems from improper memory deallocation that could leave sensitive cryptographic data unprotected. The function aead_request_free() should be utilized in place of kfree() to ensure that sensitive information is securely zeroed out before being freed. This change enhances data security by preventing potential information leakage, ensuring that sensitive cryptographic materials are permanently wiped from memory.

References